I wanted the setup to be as much separated as possible from the host, so no --net=host is used, but I created a script (nm-routes.sh) to scan periodically relevant containers for routes and add them to host (pointing to the containers) on a separate routing table